Description
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-urllib3 | 1.25.6-4 | — |
| Debian 13 | python-urllib3 | 1.25.6-4 | — |
| Debian 12 | python-urllib3 | 1.25.6-4 | — |
| Debian 10 | python-urllib3 | 1.24.1-1+deb10u1 | DLA-3610-1 |
| Debian 9 | python-urllib3 | 1.19.1-1+deb9u1 | DLA-2686-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | python-urllib3 | 1.22-1ubuntu0.18.04.1 | USN-3990-1 |
| Ubuntu 16.04 LTS | python-urllib3 | 1.13.1-2ubuntu0.16.04.3 | USN-3990-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | Cython +1 | 0.28.1-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | PyYAML +1 | 3.12-16.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | babel +1 | 2.5.1-9.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | numpy +3 | 1:1.14.2-13.module+el8.1.0+3323+7ac3e00f | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | pytest +1 | 3.4.2-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-PyMySQL +1 | 0.8.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-attrs +1 | 17.4.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-backports +1 | 1.0-15.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-backports-ssl_match_hostname +1 | 3.5.0.1-11.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-chardet +1 | 3.0.4-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-coverage +1 | 4.5.1-4.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-dns +1 | 1.15.0-10.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-docs +2 | 2.7.16-2.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-docutils +1 | 0.14-12.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-funcsigs +1 | 1.0.2-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-idna +1 | 2.5-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-ipaddress +1 | 1.0.18-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-jinja2 +1 | 2.10-8.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-lxml +1 | 4.2.3-3.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-markupsafe +1 | 0.23-19.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-mock +1 | 2.0.0-13.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-nose +2 | 1.3.7-30.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pip +3 | 9.0.3-16.el8 | RHSA-2020:1916 |
| RHEL 8 | python-pluggy +1 | 0.6.0-8.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-psycopg2 +4 | 2.7.5-7.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-py +1 | 1.5.3-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pygments +1 | 2.2.0-20.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pysocks +1 | 1.6.8-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-pytest-mock +1 | 1.9.0-4.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-requests +1 | 2.20.0-2.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-setuptools_scm +1 | 1.15.7-6.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-six +1 | 1.11.0-5.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-sqlalchemy +2 | 1.3.2-1.module+el8.1.0+2994+98e054d6 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-urllib3 +1 | 1.24.2-1.module+el8.1.0+3280+19512f10 | RHSA-2020:1605, RHSA-2019:3590, RHSA-2019:3335 |
| RHEL 8 | python-virtualenv +1 | 15.1.0-19.module+el8.1.0+3507+d69c168d | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python-wheel +2 | 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2 +6 | 2.7.16-12.module+el8.1.0+4148+33a50073 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-bson +3 | 3.6.1-11.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-pip +1 | 9.0.3-14.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-rpm-macros | 3-38.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python2-setuptools +1 | 39.0.1-11.module+el8.1.0+3446+c3d52da3 | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | python3-urllib3 | 1.24.2-2.el8 | RHSA-2019:3590 |
| RHEL 8 | pytz +1 | 2017.2-12.module+el8.1.0+3111+de3f2d8e | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 8 | scipy +1 | 1.0.0-20.module+el8.1.0+3323+7ac3e00f | RHSA-2020:1605, RHSA-2019:3335 |
| RHEL 7 | python-pip +1 | 9.0.3-7.el7_7 | RHSA-2020:2068, RHSA-2020:0850 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | python-urllib3 +1 | 1.24.3-1.el7 | RHBA-2020:2804, RHBA-2020:2785 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | python2-Cython | 0.28.1-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-PyMySQL | 0.8.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-attrs | 17.4.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-chardet | 3.0.4-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-coverage | 4.5.1-4.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-dns | 1.15.0-10.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-docs +1 | 2.7.16-2.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-docutils | 0.14-12.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-funcsigs | 1.0.2-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-idna | 2.5-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-ipaddress | 1.0.18-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-markupsafe | 0.23-19.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-mock | 2.0.0-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pluggy | 0.6.0-8.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-psycopg2 +3 | 2.7.5-7.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-py | 1.5.3-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pysocks | 1.6.8-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytest | 3.4.2-13.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytest-mock | 1.9.0-4.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pytz | 2017.2-12.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-pyyaml | 3.12-16.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-requests | 2.20.0-3.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605 |
| AlmaLinux 8 | python2-rpm-macros | 3-38.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
| AlmaLinux 8 | python2-setuptools_scm | 1.15.7-6.module_el8.6.0+2781+fed64c13 | ALSA-2020:1605, ALSA-2019:3335 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | Cython | 0.28.1-7.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | PyYAML | 3.12-16.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | pytest | 3.4.2-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-PyMySQL | 0.8.0-10.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-attrs | 17.4.0-10.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-chardet | 3.0.4-10.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-coverage | 4.5.1-4.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-dns | 1.15.0-10.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-docs | 2.7.16-2.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-docutils | 0.14-12.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-funcsigs | 1.0.2-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-idna | 2.5-7.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-ipaddress | 1.0.18-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-jinja2 | 2.10-8.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-lxml | 4.2.3-3.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-markupsafe | 0.23-19.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-mock | 2.0.0-13.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-nose | 1.3.7-30.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pluggy | 0.6.0-8.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-psycopg2 | 2.7.5-7.el8 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-py | 1.5.3-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pygments | 2.2.0-20.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pymongo | 3.6.1-11.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pysocks | 1.6.8-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-pytest-mock | 1.9.0-4.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-requests | 2.20.0-3.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605 |
| Rocky Linux 8 | python-setuptools_scm | 1.15.7-6.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-virtualenv | 15.1.0-19.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python-wheel | 1:0.31.1-2.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | python2-rpm-macros | 3-38.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | pytz | 2017.2-12.module+el8.4.0+403+9ae17a31 | RLSA-2020:1605, RLSA-2019:3335 |
| Rocky Linux 8 | scipy | 1.0.0-20.module+el8.3.0+120+426d8baf | RLSA-2020:1605, RLSA-2019:3335 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | python-urllib3 | 1.24-9.4.1 | SUSE-SU-2019:2332-1 |
| SLES 15 | python-urllib3 | 1.22-6.4.1 | SUSE-SU-2019:2331-1 |
| SLES 12 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SLES 2 | python-urllib3 | 1.24-9.4.1 | SUSE-SU-2019:2332-1 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 9 | crowbar-core | 6.0+git.1566321308.1de18b9a4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-ha | 6.0+git.1566406179.7549de2-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1566404979.41279a88e-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-ui | 1.3.0+git.1563181545.65360af5-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ceilometer | 11.0.2~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-cinder | 13.0.7~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-designate | 7.0.1~dev21-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-heat | 11.0.3~dev19-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-fwaas-ui | 1.5.1~dev6-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-lbaas-ui | 5.0.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-horizon-plugin-neutron-vpnaas-ui | 1.4.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.4~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic-python-agent | 3.3.3~dev4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-keystone | 14.1.1~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-magnum | 7.1.1~dev28-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-manila | 7.3.1~dev3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-monasca-notification | 1.14.2~dev1-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-monasca-persister +1 | 1.12.1~dev9-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.5~dev22-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 5.0.1~dev459-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-lbaas | 13.0.1~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.2.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-octavia | 3.1.2~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-tempest | 19.0.0-12.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-cinder-tempest-plugin | 0.1.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-ironicclient | 2.5.3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-keystonemiddleware | 5.2.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-monasca-tempest-plugin | 0.3.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-openstackclient | 3.16.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-openstacksdk | 0.17.3-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-proliantutils | 2.8.4-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-urllib3 | 1.23-3.6.1 | SUSE-SU-2019:2391-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-vmware-nsx | 13.0.1~dev146-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | python-vmware-nsxlib | 13.0.1~dev24-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 9 | yast2-crowbar | 3.4.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud Crowbar 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE OpenStack Cloud 9 | ardana-ansible | 9.0+git.1566374020.301191f-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-barbican | 9.0+git.1566251498.be02ca4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cinder | 9.0+git.1565678764.c3a9b9f-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cluster | 9.0+git.1559333871.40508f7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-cobbler | 9.0+git.1566336494.93967dd-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-db | 9.0+git.1564409964.b7e4fc3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-designate | 9.0+git.1565680593.df7a432-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-extensions-nsx | 9.0+git.1566213657.69862ab-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-glance | 9.0+git.1566375806.f0b2333-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-heat | 9.0+git.1565721273.f44b8d7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-horizon | 9.0+git.1565891518.2a545a1-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-input-model | 9.0+git.1562848565.91e75b2-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-installer-ui | 9.0+git.1566255088.3443670-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-ironic | 9.0+git.1565721987.ddc59c8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-keystone | 9.0+git.1565891593.cad6d1a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-logging | 9.0+git.1565761582.2dc823a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-magnum | 9.0+git.1565762005.016032a-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-monasca | 9.0+git.1566332665.ad894c0-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-mq | 9.0+git.1565115025.148d092-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1566251310.3a1e8f9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-nova | 9.0+git.1566332515.e232568-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-octavia | 9.0+git.1566206502.6c87b41-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-opsconsole | 9.0+git.1566251377.b1caeaa-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-opsconsole-ui | 9.0+git.1555530925.206f1a8-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-osconfig | 9.0+git.1565764394.545b573-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-service | 9.0+git.1564706915.edd44c4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-ses | 9.0+git.1565962617.523149b-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-swift | 9.0+git.1565891872.73fc3c7-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | ardana-tempest | 9.0+git.1566471752.a3c5c9c-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ceilometer | 11.0.2~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-cinder +1 | 13.0.7~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-designate +1 | 7.0.1~dev21-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-heat +1 | 11.0.3~dev19-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-fwaas-ui | 1.5.1~dev6-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-lbaas-ui | 5.0.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-horizon-plugin-neutron-vpnaas-ui | 1.4.1~dev7-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.4~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-ironic-python-agent | 3.3.3~dev4-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-keystone +1 | 14.1.1~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-magnum | 7.1.1~dev28-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-manila | 7.3.1~dev3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-monasca-notification | 1.14.2~dev1-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-monasca-persister +1 | 1.12.1~dev9-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.5~dev22-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 5.0.1~dev459-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-neutron-lbaas | 13.0.1~dev14-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-nova +1 | 18.2.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-octavia | 3.1.2~dev8-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | openstack-tempest | 19.0.0-12.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-ardana-configurationprocessor | 9.0+git.1566405927.c5c03d4-3.8.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-cinder-tempest-plugin | 0.1.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-ironicclient | 2.5.3-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-keystonemiddleware | 5.2.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-monasca-tempest-plugin | 0.3.0-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-openstackclient | 3.16.2-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-openstacksdk | 0.17.3-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-proliantutils | 2.8.4-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-python-engineio | 2.0.2-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-swiftlm | 9.0+git.1541434883.e0ebe69-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-urllib3 | 1.23-3.6.1 | SUSE-SU-2019:2391-1 |
| SUSE OpenStack Cloud 9 | python-vmware-nsx | 13.0.1~dev146-9.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | python-vmware-nsxlib | 13.0.1~dev24-8.1 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev18-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev16-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.0.4~dev4-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.4~dev9-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.1.1~dev28-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.3.1~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.5~dev22-6.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.1.2~dev8-4.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev9-3.7.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev1-2.4.2 | SUSE-SU-2019:2267-1 |
| SUSE OpenStack Cloud 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE Manager Server 3.2 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SUSE HPE Helion OpenStack 8 | python-urllib3 | 1.22-5.6.1 | SUSE-SU-2019:2300-1 |
| SUSE Enterprise Storage 5 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
| SUSE Enterprise Storage 4 | python-urllib3 | 1.22-3.14.1 | SUSE-SU-2019:2370-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-kubernetes | 28.1.0-4.3 | openSUSE-SU-2026:12013-1, openSUSE-SU-2024:14144-1 |
| openSUSE Tumbleweed | python-urllib3 | 1.26.6-1.2 | openSUSE-SU-2026:12044-1, openSUSE-SU-2024:14055-1, openSUSE-SU-2024:11277-1 |
| openSUSE Tumbleweed | python-urllib3_1 | 1.26.20-7.2 | openSUSE-SU-2026:12045-1 |
| openSUSE Leap 15.1 | python-urllib3 +1 | 1.24-lp151.2.3.1 | openSUSE-SU-2019:2133-1 |
| openSUSE Leap 15.0 | python-urllib3 | 1.22-lp150.5.3.1 | openSUSE-SU-2019:2131-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | python2-pip +1 | 9.0.3-1.amzn2.0.2 | ALAS2-2020-1389 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | babel +1 | 2.5.1-9.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2 +6 | 2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-Cython | 0.28.1-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-PyMySQL | 0.8.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-attrs | 17.4.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-backports | 1.0-15.0.1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-backports-ssl_match_hostname | 3.5.0.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-bson +2 | 3.6.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-chardet | 3.0.4-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-coverage | 4.5.1-4.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-dns | 1.15.0-10.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-docs +1 | 2.7.16-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-docutils | 0.14-12.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-funcsigs | 1.0.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-idna | 2.5-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-ipaddress | 1.0.18-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-jinja2 | 2.10-8.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-lxml | 4.2.3-3.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-markupsafe | 0.23-19.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-mock | 2.0.0-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-nose +1 | 1.3.7-30.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-numpy +2 | 1:1.14.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pip +1 | 9.0.3-14.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pluggy | 0.6.0-8.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-psycopg2 +3 | 2.7.5-7.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-py | 1.5.3-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pygments | 2.2.0-20.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pysocks | 1.6.8-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytest | 3.4.2-13.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytest-mock | 1.9.0-4.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pytz | 2017.2-12.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-pyyaml | 3.12-16.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-requests | 2.20.0-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-rpm-macros | 3-38.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-scipy | 1.0.0-20.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-setuptools +1 | 39.0.1-11.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-setuptools_scm | 1.15.7-6.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-six | 1.11.0-5.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-sqlalchemy +1 | 1.3.2-1.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-urllib3 | 1.24.2-1.0.2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-virtualenv | 15.1.0-19.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python2-wheel +1 | 1:0.31.1-2.module+el8.1.0+5396+a4103ad2 | ELSA-2020-1605, ELSA-2019-3335 |
| Oracle Linux 8 | python3-pip +2 | 9.0.3-16.el8 | ELSA-2020-1916 |
| Oracle Linux 7 | python3-pip | 9.0.3-7.el7_7 | ELSA-2020-2068, ELSA-2020-0850 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | urllib3 | < 1.24.2 | 1.24.2 | GHSA-mh33-7rrq-662w |
Advisories 36
- ALSA-2020:1605 Moderate: python27:2.7 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2019:3335 Moderate: python27:2.7 security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-4026 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2020:1605 Red Hat Security Advisory: python27:2.7 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2019:3335 Red Hat Security Advisory: python27:2.7 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- openSUSE-SU-2026:12013-1 python313-kubernetes-35.0.0-2.4 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:12044-1 python313-urllib3-2.8.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:12045-1 python313-urllib3_1-1.26.20-7.2 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
- RHSA-2020:1916 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-3990-1 python-urllib3 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RHBA-2020:2804 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.28 packages update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2020:0850 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHBA-2020:2785 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.11 packages update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2020:2068 Red Hat Security Advisory: python-pip security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- RHSA-2019:3590 Red Hat Security Advisory: python-urllib3 security update Red Hat Security Advisories (RHSA) · Mar 23, 2026
- DLA-3610-1 python-urllib3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2686-1 python-urllib3 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2020:1605 Moderate: python27:2.7 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2019:3335 Moderate: python27:2.7 security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:14055-1 python310-urllib3-2.1.0-3.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2267-1 Security update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keystone, ardana-logging, ardana-magnum, ardana-monasca, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar-core SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11277-1 python36-urllib3-1.26.6-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2131-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2332-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2300-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14144-1 python310-kubernetes-28.1.0-4.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2331-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2133-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2370-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2391-1 Security update for python-urllib3 SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2020-2068 Moderate: python-pip security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 19, 2020
- ELSA-2020-1605 Moderate: python27:2.7 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 5, 2020
- ELSA-2020-1916 Moderate: python-pip security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 5, 2020
- ELSA-2020-0850 Moderate: python-pip security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 18, 2020
- ALAS2-2020-1389 Moderate: python-pip security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 8, 2020
- ELSA-2019-3335 Moderate: python27:2.7 security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 14, 2019
References
- https://github.com/urllib3/urllib3/compare/a6ec68a...1efadf4
- [oss-security] 20190418 Re: urllib3: adds system certificates to ssl_context mailing-list
- USN-3990-1 vendor-advisory
- openSUSE-SU-2019:2131 vendor-advisory
- openSUSE-SU-2019:2133 vendor-advisory
- RHSA-2019:3590 vendor-advisory
- RHSA-2019:3335 vendor-advisory
- FEDORA-2020-6148c44137 vendor-advisory
- FEDORA-2020-d0d9ad17d8 vendor-advisory
- [debian-lts-announce] 20210615 [SECURITY] [DLA 2686-1] python-urllib3 security update mailing-list
- [debian-lts-announce] 20231008 [SECURITY] [DLA 3610-1] python-urllib3 security update mailing-list